Malicious code in jasmine-less-loader-schema-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8781290ca38b5ec3e1d92269c19df4d6e6701a45b9ed9dc6da3617bc2daaa5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-jwt-antares-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98c8e4329229fbcc553c2ab25a7908722a9425806a82c7c46aeb6def65c0371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-mutation-stop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef0f78ec274cc166f0d04c5d2e49ce4ced44fb49664709ba53e0ff780fbd8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-meteor-nightwatch-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d258d1a74582347b0d7071902b081a7b884336ddb8de8ea8700151566361f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-sedna-elektra-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aaf62dc662a6d8b1068d1c49bd2b9ec972d870646a3b2987a8882ceac957b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-oauth-izar-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d68bd7685f92c9fe05e749f9754a0cba699d978905e494f3045f2e5beb5c437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-redis-luna-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7dc99789c6a0bc0bffec45b88cad0cdbd527b9612b08e1c1088d1d9fa367c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-blitz-process-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb7ff6204819262337ea539f3737fa48f0b96ac4de62f3f641de134076793aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-cygnus-hyperion-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54902156b4b37f88f59026798fee089db5ff6660a5881c39ec85cba8ece7921c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-jest-sequelize-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e8e8e3f60647fb8f627ae04557661e87923e588fb334d4d4ba33d2b9b02584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-scripts-pm2-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6561ef5febda47502a4f49ac065f9eaa9f5b22b0ff3918336d4744eefb62802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-babel-sagitta-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280ac52a25aeeb1b2e6c9f3a4a230c3844f59f27bfdf1b084f24285bbc370d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-babel-lint-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a3b28da6c63c75d153189ed52ace7876ed614e4e5a0dd5668034af33cfb653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-webdriver-mocha-yildun-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204e94d6ea198d5df1a1fbf2ba5bba87ce888ae2859eb0febdbd54e436e7238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-luna-sadr-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16462d0ef7a890863b7fa94c464a2b54c651b156d14de9f454999771ad47d84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141235 Malicious code in cressida-ini-markdownlint-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65662cda736d980784b56270f444cf897c757c5fde067bd14ebded2277d2d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145056 Malicious code in miranda-rigel-webdriver-manager-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bdc0dfd44e9ef24f1f26a65a9dde8fe116137932c6a13652c8544024480f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-chakra-ui-loopback-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab747ea739dd91961c6a25997e6d9ab061a1747a579280701e16f99aa599da91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141774 Malicious code in dotenv-safe-quito-sagitta-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd17f282b80e518fd36af5bd8237ddb4c4be6a734607ebdcbbb5d20ec0adee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...